Data Protection & Privacy

The Cybersecurity & Privacy Team of CMS Netherlands has a long standing practical experience of advising Dutch and international clients on cybersecurity and data protection matters across a wide range of industries. Our approach combines thorough legal specialisation with expertise in sector and application-specific requirements and concepts that has been gained through our work.

Cybersecurity

Hand-in hand with fast-paced technological change and market disruption come concerns about cyber incident matters, such as business e-mail compromise, CEO fraud and ransomware attacks. We help organizations to determine effective legal strategies in cyber risk management. We believe cyber risk to be a holistic issue, which cannot be resolved by merely looking through the eyes of a lawyer. Our specialists are used to closely cooperate in multidisciplinary teams at any level within your organization, including IT, HR, legal & compliance, PR and the board. Our daily operations also include close collaborations with external IT (forensic) specialists and crisis communications experts.

Our expertise includes:

• Providing 24/7 cyber incident legal response services
• Drafting and negotiating information security agreements
• Cyber loss related litigation
• Representing clients in breach notification procedures and investigations
• Multistakeholder incident management (board, legal & compliance, public relations.

Data Protection & Privacy

We provide support and advice on structuring business models in compliance with data protection regulations (privacy by design), enabling such models to be implemented in an environment where privacy and personal rights are becoming increasingly sensitive issues. Close international co-operation within the CMS Data Protection Group enables us to deal with issues at any European level.

Our expertise includes:

• Data protection-compliant structuring of business models and all internal/external processes which involve personal data of customers, employees or third parties.
• Advising on the exchange or export of personal data.
• Data protection issues in bringing IT or business processes to the cloud or in providing cloud services for customers.
• Drafting processor agreements and BCR
• Designing privacy policies and data protection strategies at group, corporate, departmental or process level, including works council and collective employment law aspects.
• Advice on (technical) aspects of system data protection and on related legal issues in connection with the acquisition, creation, use and analysis of information / big data.
• Dealing with and representation before Data Protection Authority and other public bodies.

We have gained experience in coaching the legal side of data protection projects and issues for clients in many different industries, such as the financial services, health care & life sciences, IT and telecoms, consumer goods, real estate (investment management) and hotels & leisure industries.